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1. (Currently Amended) A computer-implemented method for providing access to an 
mformation account stored in a central data repository that is accessible via a distributed network and is 
fi pupled to a database rnanapement system the information account containing consumer information 
elements that emMs** are changed by the consumer, the method comprising the steps of: 

receiving, over the distributed electronic network, a first request from a network device for 
access to the infonnation account and consumer authentication information in response to the consumer 
inputting the consumer authentication information while interacting with a first web-site; 

in response to the request, authenticating the consumer with the «hi,w ^ naftfemCTf 
based on the consumer authentication information, thereby providing the consumer with access to the 
information account stored in the central data ren^w . ^ C(tn ^„ ,w^ on elemenf rf<hw 
mformation acco.mt eonprtdnp on. or mo r e n ame Adds to id entify the a second cmiqimwr 

mformanon element of the mformarior, acco un t ^ one or more ^ 
associated with the cor^pw>r; [[and]] 

in response to authenticating the consumer, automaticaUy managing subsequent authentications 
of the consumer w ] thtH e dataha fi emanapnr,^, r trm so that the consumer will not be required to again 
mput the consumer authentication information upon initiating a second request for access to the 
mformanon account while interacting with a subsequent web-site that is configured to provide access to 
the information account upon authentication of the consumer; 

in response to the fir* ^ond ,nd subsequent ZLto for acc^ t, ^ ^ 

s tored m the c M data repository retrieving one or more consumer .nfW,^ ^- ^ 

pfenmtion accost by filter^ data from the information accost with da^ „,„... ^ 

b a sed on an identification of a wr-h-site hdno> bv the 

sending the retrieved consumer information dm^ts over the di e t^ n ted elects 
parsmg the retrieved consumer inflation element^ m * 

au tp^populatinp input field, of dela y e d web pa ,e file o f ^ Wfi ^ ^ . , ^ 

consumer with the congi,™ ^ inform n tiATi elements 
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2. (Original) A computer readable medium having stored thereon computer executable 
instructions for performing the method of claim 1. 

3. (Original) The method of claim l, wherein automatically managing subsequent 
authentications of the consumer comprises determining that a previous authentication of the 
consumer for access to the information account remains valid and generating a message to cause 
the subsequent web-site to by-pass a sign-on interface that would otherwise prompt the consumer 
to input the consumer authentication information when the consumer initiates the second request 
for access to the information account. 

4. (Original) A computer readable medium having stored thereon computer executable 
instructions for performing the method of claim 3. 

5. (Original) The method of claim 3, wherein the previous authentication of the consumer 
remams valid if the consumer initiates the second request for access to the information account 
prior to the occurrence of a terminating event 

6. (Original) The method of claim 5, wherein said terminating event comprises expration of a 

time-out interval, 

7- (Original) The method of claim 6, wherem the time-out interval comprises a determined 

duration of time; and 

wherein the time-out interval is considered to have expired if a difference between a 
current tune and a time of the previous authentication is greater than the determined duration of 
time 



8. (Original) The method of claim 5 where™ uiri 

«um 3 , wnerein said terminating event comprises termination of a 
browser session at the network device. 
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9. (Original) The method of claim 1, wherein the network device comprises a client device 
executing a browser; and 

wherein the single sign-on function is implemented by one or more temporary client-side 
applications. 

10. (Original) The method of claim 9. wherein said one or more client-side applications execute 
a communication protocol for communicating with a database management system at a host 
server that manages the central data repository. 



11. (Onguial) The method of claim 9, wherein the network device executes a browser that 
displays a web page file that has been retrieved from a vendor server, the web page file including 
an mstmcuon that causes the browser to request transmission of said one or more client-side 
applications. 

12- (Original) The method of claim 9, wherein said one or more client-side applications are 
further configured to receive selected consumer information elements from the information 
account in response to authentication of the consumer and to integrate the consumer information 
elements into a vendor's business process on behalf of the consumer. 

13. (Currently Amended) The method of claim 12, wherein the step of integrating the selected 

consumer information elements into a vendor's business process comprises the steptfs]] of: 

^ ™ t 0 P°F"lat i ai-«h o nnlnn t n fl tui ^ umu Mo r m on nlnmnnl. intu a l Lmm on, in put H o l d 

o f » pngo fil o tMt h ir Wi u b U j v n rt fn i.it u du i m , uud 

allowing the consumer to interact w,th the browser in 'order to edit the selected consumer 
^formation elements, if desned, and to submit the web page file to the vendor server for 
processing of the selected consumer information elements. 
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14. (Original) A computer readable medium having stored thereon computer executable 
instructions for performing the method of claim 13. 

15. (Original) The method of claim 1, wherein the information account comprises a plurality of 
consumer information elements stored in a tagged data format. 

16. (Original) The method of claim 1, further comprising receiving from the network device a 
first-determined equipment identifier that uniquely identifies the network device and storing the 
first-determined equipment identifier in an authentication table in association with the consumer 
authentication information; and 

wherein automatically managing subsequent authentications of the consumer comprises 
recording in the authentication table in association with the consumer authentication information 
and the first-detennined equipment identifier an indication that a single sign-on feature is 
activated. 

17. (Original) The method of claim 16, further comprising the steps of: 

receiving from the network device a second-determined equipment identifier in response 
to the consumer initiating a second request for access to the information account; 

m response to receiving the second-determined equipment identifier*, consulting the 
authentication table based on the second-determined equipment identifier and determining that 
the second-determined equipment identifier matches the first-determined equipment identifier 
based on the first-determined equipment identifier, determining from the authentication table mat 
the single sign-on feature is activated; and 

transmitting to the network device a message to cause a sign^on interface that would 
prompt the consumer to input the consumer authentication information to be by-passed. 

18. (Original) A computer readable medium having 5t ored thereon computer executable 
instructions for performing the method of claim 1 7. 
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19. (Original) The method of claim 17, wherein automatically managing subsequent 
authentications of the consumer further comprises: 

recording in the authentication table in association with the consumer authentication 
information and the first^ermined equipment identifier, a time at which the consumer was 
authenticated to access the information account; 

in response to determining that the single sign-on feature is activated, determining from 
the authentication table the time at which the consumer was authenticated; and 

prior to transmitting the message to bypass the sign-on interface, determining that a 
difference between a current time and the time at which the consumer was authenticated is not 
less than a time out interval 

20. (Original) A computer readable medium having stored thereon computer executable 
instructions for performing the method of claim 19. 

21. (Original) The method of claim 1, wherein automatically managing subsequent 
authentications of the consumer is performed in response to an input command supplied by the 
consumer to indicate that a single sign-on feature should be activated. 



(The Remainder of this page has been intentionally left blank.J 
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22. (Currently Amended) A computer-implemented method for accessing an information account stored 
in a central data repository that is accessible via a distributed network and is coupled tn „ w ^ me 
information account containing consumer information elements that tt* be altered are changed by the 
consumer, the method comprising the steps of; 

transmitting to a host server, over the distributed electronic network, a first request for access to 
the information account and consumer authentication information in response to the consumer inputting 
the consumer authentication information while interacting with a first web-site hosted by a vendor server- 
receiving an acknowledgment indicating that the host server authenticated the consumer based on 
the consumer authentication information, thereby providing the consumer with access to the information 
*** " ^ ^ * ata T » ft* r lement nf ^ 

account compnsmp one or more name fields to identify the consume , „ ^ Umer mfhrnMtinT1 

element of the information account rmqririnp on. or mnre ^ aH ^ B « elds asftnri - flt<tH ^ 
consumer [[and]} 

in response to the acknowledgment, automatically managing subsequent authentications of the 
consumer with the host ser^ so that the consumer wil, not be required to again input the consumer 
authenncatxon information upon initiating a second request for access to the information account while 
mteractmg with a subsequent website that is configured to provide access to the information account 
upon authentication of the consumer: 

■ fr"*™ ^ the first, second, „nd sun^wnt re^t, ^ .„ „ me infnrmatinn . 

stored m the central data repository retnVvm, one . :., 0rmat1 . ftT1 ft|ft _, e ^ 

^nation account by filtering data from the inform^ ^ _ ^ idenrifira ,, nn ^ _ 
being accessed bv the consimi^ 

se nding the retrieved consumer information wtammt , o v n - the ^_,.„ 
Rar,sinR the retrieve consume ftifennatian ri«™wt» ; 

auto-popularin, inpnt firt* of, di^vd weh M - ^ ^ ^ ^ 
consumer with the ^0^^^ 
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23. (Original) A computer readable medium having stored thereon computer executable 
instructions for performing the method of claim 22. 

24. (Original) The method of claim 22, wherein the consumer interacts with the first web-site 
using a browser; 

wherein the first web-site includes an instruction that causes the browser to download 
from the host server one or more client-side applications configured for automatically managing 
subsequent authentications of the consumer. 

25. (Original) The method of claim 24, wherein the one or more client-side applications are 
configured to perform the steps comprising: 

determining a plurality of selected consumer information elements that ate to be input 
into input fields of the first web-site; 

transmit to the host server a request for retrieval of the selected consumer information 

elements; and 

in response to receiving the selected consumer information elements from the host server 
auto-populatmg the selected consumer information elements into the input fields of the first web' 
site. 



26. (Original) A computer readable medium having stored thereon computer executable 
instructions for performing the method of claim 25. 



[The Remainder of this page has been intentionally left blank.J 



-8- 



PAGE 13/35 'RCVD AT 71512005 12:45:29 PM [Eastern DayOghtTime] ' SVR:USPT0-EFXRM/2 ' DM8:8729306 1 CSID:404 572 5 145' DURATION (mm-ss):1042 



JUL 05 2005 12:52 FR KING AND SPALDING 



404 572 5145 TO 5551807258810500 P. 14 



Serial No. 09/974,766 

27. (Original) The method of claim 22, wherein the consumer interacts with the first web-site 
using a network device; and 

wherein automatically managing subsequent authentications of the consumer comprises: 
detemiining a first-detennined equipment identifier that uniquely identifies the network device 
and transmitting the first-detennined equipment identifier to the host server for storage in an 
authentication table in association with the consumer authentication mformation, 

in response to the consumer initiating a second request for access to the information 
account, determining a second-determined equipment identifier and transmitting the second- 
determined equipment identifier to the host server, wherein the host server consults the 
authentication table based on the second-determined equipment identifier to determine that the 
second-determined equipment identifier matches the first-determined equipment identifier and, 
by association, that the consumer has previously been authenticated and that a single sign-on 
feature is activated, and 

receiving from the host server a message to cause the subsequent web-site to by-pass a 
sign-on interface that would otherwise prompt the consumer to input the consumer authentication 
information. 

28. (Original) A computer readable medium having stored thereon computer executable 
instructions for performing the method of claim 27. 

29. (Original) The method of clahn 22, wherein the step of automatically managing subsequent 
authentications of the consumer is performed in response to detecting an input command 
supplied by the consumer to indicate that a single sign-on feature should be activated. 



[The Remainder of this page has been intentionally left blank.] 
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\ 30. (Original) The method of claim 22, wherein automatically managing subsequent 

J authentications of the consumer comprises communicating with the host server to determine that 

I ■ a previous authentication of the consumer for access to the information account remains valid 

.: and to instruct the subsequent web-site to by-pass a sign-on interface that would prompt the 

; consumer to input the consumer authentication information when the consumer initiates the 

second request for access to the information account 

31. (Original) The method of claim 30, wherein the previous authentication of the consumer 
remains vahd if the consumer initiates the second request for access to the information account 
prior to the occurrence of a terminating event 

32. (Original) The method of claim 31, wherein said terminating event comprises expiration of a 
time-out interval. 

33. (Original) The method of claim 32, wherein the time-out interval comprises a determined 
duration of time; and 

wherein the time-out interval is considered to have expired if a difference between a current time 
and a time of the previous authentication is greater than the determined duration of time. 

34 (Original) The method of claim 31, wherein said tenninating event comprises termination of 

a browser session. 



[The Remainder of this page has been intentionally left blank.) 



-10- 



PAGE 1 5/35 ' RCVD AT M5 1 2:45:29 PM [Eastern Daylight fine] s SVR:USPT0-EFXRF-1/2 1 DN1S: 8729306 ' CSID:404 572 5145 ' DURATION (mm-ss): 1 0-02 



JUL 05 2005 12:53 FR KING AND SPALDING 404 572 5145 TO 555 1 8072588 1 0500 P. 16 



Serial No. 09/974,766 

35. (Cun^fly Amended) A system storing, managing and distributing consumer information via a 
distributed netwoik, comprising: 

a central data repository accessible via the distributed electronic network for storing an 
tnformatton account the information account containing consumer information elements that ea*-fee 
atesed are changed by the consumer, a first cm „ ^-, nt „f — 

cpmpnsmg one or more name fields to identify the » ,^ p d cmtrr nf 

^mforrnatton account comprise o nP or more geommmc addr^, fields ^ ^ T 

a host server for commumcatine with the central data repository and with a network device via 
the distributed electronic network and for executing computer^xecutable instructions for: 

living with the hast server over the distributed electronic network, a first request 
from the network device for access to the information account and consumer authentication 
information in response to the consumer manually inputting the consumer authentication 
information while interacting with a first web-site; 

in response to the request, authenticating the consumer with the host ^ based ^ ^ 
consumer authentication information, thereby providing the consumer with access to the 
information account stored in the r^l ^ ^^[^^ 

in response to authenticating the consumer, automatically managing subsequent 
authentications of the consumer with the host server so that the consumer will not be required to 
again input the consumer authentication information upon initiating a second request for access 
to the ^formation account while interacting with a subsequent website that is configured to 
provide access to the information account upon authentication of the consumer- 

m respond to the fim ^onrt and subset rennets for ^ I ^ 

accessed hy the consume; iLM ^ 

network T^ ^ " , ' nf0n ™ t ^ HrmPn * ™ r the HiB ^^ "-T-"iT 

parsing the retrieved cnn^ .-f o rmation ele m ^ ; 

h t „ auto — ^f-'T— nf n rli,,,!,, „ itebein,^ 

by_ the consumer with the ^c,^ . nformati™ ri^t. 

-li- 
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36. (Original) The system of claim 35, wherein automatically managing subsequent 
authentications of the consumer comprises detennining that a previous authentication of the 
consumer for access to the information account remains valid and generating a message to cause 
the subsequent web-site to by-pass a sign-on interface that would otherwise prompt the consumer 
to input the consumer authentication information when the consumer initiates the second request 
for access to the information account. 

37. (Original) The system of claim 36, wherein the previous authentication of the consumer 
remains valid if the consumer initiates the second request for access to the information account 
prior to the occurrence of a terminating event 

38. (Original) The system of claim 37, wherein said terminating event comprises expiration of a 

time-out interval, 

39. (Original) The system of claim 38, wherein the time-out interval comprises a determined 
duration of time; and 

wherein the time-out interval is considered to have expired if a difference between a 
current time and a time of the previous authentication is greater than the determined duration of 
time. 



40. (Original) The system of claim 37, wherein said terminating event comprises termination of 
a browser session at the network device. 



[The Remainder of this page has been intentionally left blank.] 
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41. (Original) The system of claim 35, wherein the network device comprises a client device 
executing a browser; 

wherein the host server further comprises a memory for storing one or more client-side 
applications configured to manage communications with the host server and to automatically 
manage subsequent authentications of the consumer on behalf of the client device; and 
wherein the host server executes further computer-executable instructions for transmitting to the 
client device said one or more client-side applications prior to receiving the first request for 
access to the information accoxmt. 

42. (Original) The svsteai of c]aim 41 , wherein the browser displays a web page file that has 
been retrieved from a vendor server, the web page file including an instruction that causes the 
browser to request transmission of said one or mote client-side applications from the host server. 

43. (Original) The system of claim 35, wherein the information account comprises a plurality of 
consumer information elements stored in a tagged data format. 

44. (Original) The system of claim 35, wherein the host server further executes computer- 
executable instructions for 

receiving from the network device a first-determined equipment identifier that uniquely 
identrfes the network device and storing the first-determined equipment identifier in an 
authentication table in association with the consumer authentication information; and 

wherein automatically managing subsequent authentications of the consumer comprises 
reconhng in the authentication tab Ie in association with the consumer authentication information 
and the first-determined equipment identifier an indication that the single sign-on function is 
activated. 
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45. (Original) The system of claim 44, wherein automatically managing subsequent 
authentications of the consumer further comprises: 

receiving from the network device a second^eteimined equipment identifier in response 
to the consumer initiating a second request for access to the information account; 

in response to receiving the second-determined equipment identifier, consulting the 
authentication table based on the second-determined equipment identifier and determining that 
the second-determined equipment identifier matches the first-determined equipment identifier, 

based on the first-determined equipment identifier, deteimming from the authentication 
table that the single sign-on function is activated; and 

transmitting to the network device a message to cause a sign-on interface that would 
prompt the consumer to input the consumer authentication information to be by-passed. 

46. (Original) The system of claim 45, wherein automatically managing subsequent 
authentications of the consumer further comprises: 

recording in the authentication table in association with the consumer authentication 
information and the m^t-detennined equipment identifier, a time at which the consumer was 
authenticated to access the information account; 

in response to determining that the single sign-on function is activated, determining from 
the authentication table the time at which the consumer was authenticated; and 
prior to transmitting the message to by-pass the sign-on interface, determining that a difference 
between a current time and the time at which the consumer was authenticated is not less than a 
time out interval. 

[The Remainder of this page has been intentionally left blank.] 
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47. (Currently Amended) A system for providing access to an information account 

stored m a central data repository that is accessible via a distributed network, the information 
account containing consumer information elements that can bo altered arranged by the 
C ° nSUmer ' " Pmpnca t od sifcuul ui ny in g t hn, nn. ■ , l J ut . - U u U m o the system comprising: 

a client-side application configured for automatically managing authentication of the 
consumer at a network device so that the consumer will not be required to input the consumer 
authentication information upon initiating a request for access to the information account while 
interacting with a web-site that is configured to prov.de access to the information account upon 

authentication of the consumer, a first cons^ ^ „ , 

compnsmp on. or more name fields to identify the - ^ COTIgnm ^ in ^„ 

element of the information account uprising 0 ,e or ^ r _ Thic aMreRR feM . 
with the consumer; 

wherein the client-side application automatically manages authentication of the consumer 
by communicating with a host server to determine that a previous authentication of the consumer 
prov.dmg the consumer with access to the information account remains valid and to instruct the 
web-site to bypass a sig„^>n interface that would otherwise prompt the consumer to input the 
consumer authentication information when the consumer initiates the request for access to the 
information account^ 

. *° ^ m reS P"™ *> ^ reouest for a ^c ^ mffarmatlfW , t 

retries one or more consumer information element* ^ a ^„„, K y «i^. r 

data mom the information account has^ on „ identic ,, e ^ a _ 

me co^er; the host s erver send, the ^ rnn-nr, ..Ration element ^ ^ 
distributed electronic netwnrir tn ^ clients npp1 ,w;_. 

„ WhCreiD ^ ^ Hrnf inn 11 11 ies «» --mn, T 

web fil, ^ weh . sife ^ _ ^ 
consumer with the consumer inferno,, elf!Tnftntc 
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48. (Original) The propagated signal of claim 47, wherein the previous authentication of the 
consumer remains valid if the consumer initiates the second request for access to the information 
account prior to the occurrence of a terminating event. 

49. (Original) The propagated signal of claim 48, wherein said terminating event comprises 
expiration of a time-out interval. 

50. (Original) The propagated signal of claim 49, wherein the time-out interval comprises a 
determined duration of time; and 

wherein the time-out interval is considered to have expired if a difference between a 
current time and a time of the previous authentication is greater than the determined duration of 
time. 

51. (Original) The propagated signal of claim 48, wherein said terminating event comprises 
termination of a browser session at the network device. 

52. (Original) The propagated signal of claim 47, wherein the client-side application is 
configured for determining an equipment identifier that uniquely identifies the network device 
and transmitting the equipment identifier to the host server; 

wherein, in response to receiving the equipment identifier, the host server detennines that 
the previous authentication of the consumer remains valid by consulting an authentication table 
to determine that the equipment identifier matches a previously-stored equipment identifier, that 
an indication that a single sign-on feature is activated is stored in association with the previously- 
stored equipment identifier and that a terminating event has not occurred; and 

wherein, in response to detennining that the previous authentication of the consumer 
remains valid, the host server transmits to the client-side application a message to cause the web- 
site to by-pass a sign-on interface that would prompt the consumer to input the consumer 
authentication information. 
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53. (Original) The propagated signal of claim 52, wherein the client-side application is further, 
configured to receive selected consumer information elements from the information account in 
response to authentication of the consumer and to integrate the consumer information elements 
into a vendor's business process on behalf of the consumer. 

54. (Currently Amended) The propagated signal of claim 53, wherein integrating the selected 
consumer information elements into a vendor's business process comprises the step[[ s ]] of: 

m i f o pgrn lnri m Hin u i h iUu d a n m m n info in mU un nlnmnnt c iu tu at l n xt ono i npu t H o ld 
e f a wob pagn filo rocoivod from a voudor corvor; and 

allowing the consumer to interact with the browser in order to edit the selected' consumer 
information elements, if desired, and to submit the web page file to the vendor server for 
processing of the selected consumer information elements. 

55. (Original) The propagated signal of claim 47. wherein the information account comprises a 
plurality of consumer information elements stored in a tagged data format. 



[The Remainder of this page has been intentionally left blank.) 
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